Add acm-pca and efs permissions to required extra AWS permissions

goldfiglabs · Mar 19, 2021 · a858b06 · a858b06
1 parent daa824d
commit a858b06
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/permission-policies/aws-introspector-ro.json b/permission-policies/aws-introspector-ro.json
@@ -3,13 +3,18 @@
     "Statement": [
         {
             "Action": [
+                "acm-pca:ListCertificateAuthorities",
+                "acm-pca:ListTags",
+                "acm-pca:GetPolicy",
                 "apigateway:GetRestApis",
                 "dax:ListTables",
                 "ds:ListAuthorizedApplications",
                 "ds:DescribeRoles",
                 "ec2:GetEbsEncryptionByDefault",
                 "ec2:GetEbsDefaultKmsKeyId",
                 "ecr:Describe*",
+                "efs:Describe*",
+                "efs:ListTagsForResource",
                 "support:Describe*",
                 "ses:GetIdentity*",
                 "sns:GetSubscriptionAttributes",